JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

38.242.239.163

Neutral Activity

Abuse Confidence Score

0% Low Risk

119 reports

71 reporters · latest 7 months ago

ISP: Contabo GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS51167
Hostname(s): vmi2890289.contaboserver.net
Domain Name: contabo.com
Country: 🇫🇷 France
City: Lauterbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

38.242.239.163 has been reported 119 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

119 from 71 distinct reporters

First reported

August 29th 2024

Most recent report

7 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-04-07 12:20:13 UTC · (7 months ago)	38.242.239.163 (DE/Germany/vmi2890289.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 7 07:16:35 13584 sshd[15640]: pam_unix(sshd:auth): authentication ... show more 38.242.239.163 (DE/Germany/vmi2890289.contaboserver.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 7 07:16:35 13584 sshd[15640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.239.163 user=root Apr 7 07:16:37 13584 sshd[15640]: Failed password for root from 38.242.239.163 port 41878 ssh2 Apr 7 07:20:00 13584 sshd[15897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.239.163 user=root Apr 7 07:20:02 13584 sshd[15897]: Failed password for root from 38.242.239.163 port 55334 ssh2 Apr 7 07:03:06 13584 sshd[14489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.234.169.6 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇮🇹 NonOggiCaroMio	2026-04-07 11:58:31 UTC · (7 months ago)	Arruso ca si: crowdsecurity/ssh-slow-bf	Brute-Force
🇺🇸 sh97	2026-04-07 11:54:53 UTC · (7 months ago)	dedirock-8034437: SSH Brute Force from 38.242.239.163 at 2026-04-07 15:54:52 +04	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-12-11 20:10:24 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 SpaceHost-Server	2025-12-10 23:46:08 UTC · (11 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-12-10 20:10:22 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 SpaceHost-Server	2025-12-09 23:41:36 UTC · (11 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-12-09 20:10:22 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 nohacefaltapapel-et.net	2025-12-09 08:03:31 UTC · (11 months ago)	2025-12-09T08:57:00.258442cms1-b sshd[32725]: Invalid user guest from 38.242.239.163 port 34872 2025-12-09T09:02:49.628306cms1-b sshd[2026]: Invalid user isaac from 38.242.239.163 port 52720 2025-12-09T09:03:31.413165cms1-b sshd[2208]: Invalid user i ... show more 2025-12-09T08:57:00.258442cms1-b sshd[32725]: Invalid user guest from 38.242.239.163 port 34872 2025-12-09T09:02:49.628306cms1-b sshd[2026]: Invalid user isaac from 38.242.239.163 port 52720 2025-12-09T09:03:31.413165cms1-b sshd[2208]: Invalid user image from 38.242.239.163 port 49486 ... show less	Brute-Force SSH
🇫🇷 tows	2025-12-09 08:02:54 UTC · (11 months ago)	Dec 9 07:57:14 vps-d7931dc8 sshd[520661]: Disconnected from invalid user guest 38.242.239.163 port 48182 [preauth] Dec 9 08:02:51 vps-d7931dc8 sshd[520760]: Invalid user isaac from 38.242.239.163 port 39532 Dec 9 08:02:51 vps-d7931dc8 sshd[520760] ... show more Dec 9 07:57:14 vps-d7931dc8 sshd[520661]: Disconnected from invalid user guest 38.242.239.163 port 48182 [preauth] Dec 9 08:02:51 vps-d7931dc8 sshd[520760]: Invalid user isaac from 38.242.239.163 port 39532 Dec 9 08:02:51 vps-d7931dc8 sshd[520760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.239.163 Dec 9 08:02:51 vps-d7931dc8 sshd[520760]: Invalid user isaac from 38.242.239.163 port 39532 Dec 9 08:02:53 vps-d7931dc8 sshd[520760]: Failed password for invalid user isaac from 38.242.239.163 port 39532 ssh2 show less	Brute-Force SSH
🇩🇪 ipcop.net	2025-12-09 07:29:22 UTC · (11 months ago)	2025-12-09T08:27:31.223871+01:00 plusnet-de-01.api.my-carrier-services.com sshd[60614]: Disconnected from authenticating user root 38.242.239.163 port 38998 [preauth] 2025-12-09T08:28:34.133526+01:00 plusnet-de-01.api.my-carrier-services.com sshd[606 ... show more 2025-12-09T08:27:31.223871+01:00 plusnet-de-01.api.my-carrier-services.com sshd[60614]: Disconnected from authenticating user root 38.242.239.163 port 38998 [preauth] 2025-12-09T08:28:34.133526+01:00 plusnet-de-01.api.my-carrier-services.com sshd[60671]: Invalid user ubuntu from 38.242.239.163 port 32844 2025-12-09T08:28:34.212260+01:00 plusnet-de-01.api.my-carrier-services.com sshd[60671]: Disconnected from invalid user ubuntu 38.242.239.163 port 32844 [preauth] 2025-12-09T08:29:20.922833+01:00 plusnet-de-01.api.my-carrier-services.com sshd[60755]: Invalid user slurm from 38.242.239.163 port 34112 2025-12-09T08:29:21.007146+01:00 plusnet-de-01.api.my-carrier-services.com sshd[60755]: Disconnected from invalid user slurm 38.242.239.163 port 34112 [preauth] show less	Brute-Force
🇸🇦 azzuwayed	2025-12-09 07:01:17 UTC · (11 months ago)	Dec 9 09:57:53 mail sshd[1770469]: Invalid user frontend from 38.242.239.163 port 47632 Dec 9 10:00:36 mail sshd[1771142]: Invalid user summer from 38.242.239.163 port 42478 Dec 9 10:01:17 mail sshd[1771219]: Invalid user info from 38.242.239.163 por ... show more Dec 9 09:57:53 mail sshd[1770469]: Invalid user frontend from 38.242.239.163 port 47632 Dec 9 10:00:36 mail sshd[1771142]: Invalid user summer from 38.242.239.163 port 42478 Dec 9 10:01:17 mail sshd[1771219]: Invalid user info from 38.242.239.163 port 43130 show less	Brute-Force SSH
🇮🇹 sh97	2025-12-09 07:00:56 UTC · (11 months ago)	IT01-SF: SSH Brute Force from 38.242.239.163 at 2025-12-09 12:30:56 IST	Brute-Force SSH
🇦🇹 paradoxnetworks	2025-12-09 06:58:00 UTC · (11 months ago)	2025-12-09T06:57:58.129679+00:00 edge-ntt-vie01.int.pdx.net.uk sshd[3223875]: Invalid user frontend from 38.242.239.163 port 56638 2025-12-09T06:57:58.133403+00:00 edge-ntt-vie01.int.pdx.net.uk sshd[3223875]: pam_unix(sshd:auth): authentication failu ... show more 2025-12-09T06:57:58.129679+00:00 edge-ntt-vie01.int.pdx.net.uk sshd[3223875]: Invalid user frontend from 38.242.239.163 port 56638 2025-12-09T06:57:58.133403+00:00 edge-ntt-vie01.int.pdx.net.uk sshd[3223875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.239.163 2025-12-09T06:57:59.983511+00:00 edge-ntt-vie01.int.pdx.net.uk sshd[3223875]: Failed password for invalid user frontend from 38.242.239.163 port 56638 ssh2 ... show less	Brute-Force SSH
🇩🇪 ipcop.net	2025-12-09 06:47:51 UTC · (11 months ago)	Malicious activity detected from 38.242.239.163.	Brute-Force

Showing 1 to 15 of 119 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 118.212.132.226

🇻🇬 103.47.145.73

🇺🇸 69.245.119.56

🇺🇸 52.224.109.126

🇺🇸 50.6.111.141

🇮🇩 8.215.24.140

🇵🇰 223.123.113.153

🇮🇹 217.26.178.124

🇹🇳 197.21.121.165

🇳🇱 193.19.107.224

🇦🇷 190.190.1.141

🇬🇧 188.31.41.126

🇲🇽 187.198.185.146

🇳🇱 151.245.151.20

🇰🇪 102.209.76.137

🇳🇱 45.148.10.162

🇯🇵 34.146.64.215

🇧🇪 23.251.135.142

🇺🇸 20.163.12.242

🇺🇸 5.249.179.113